How does both rules works, and can we combine both rules? First, you can't combine both rules. Both rules are standalone rules
...
This option allows skipping specific sections of the Checkmk agent. By default, all the sections will be executed. Selected sections will not be executed by the agent. Skipping sections reduces CPU load on the monitored host and the amount of transferred data. However, it may result in the absence of the associated Checkmk service or services.
How should we use the rules?
| Note |
|---|
We recommend to use only one of these rules. With the "enabled" rule you can define a set of sections which should be enabled by the agent directly. In such a case you want to disable a section e.g. Windows counter due to long-running WMI commandc, you should use the disabled rule, or you deselect this entry in the enabled rule. |
...
Let's go one step further and imagine the following scenario: Per default you want to disable the Windows Logwatch the Windows Event Logs section and to enable it on specific host.
You will need to disabled sections rules:
- Rule (top rule)
- This rule without selecting any section is the rule for enabling the Windows Event Log on specific systems
- Rule (at the end, if you have more rules)
- Here you select only the Windows Event Logs. This is your default rule to disable the Log Section globaly
| Info |
|---|
|
| Info |
|---|
Related articles
| Filter by label (Content by label) | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
...